Libgcrypt is a general purpose cryptography library used for GnuPG2.
For more information see the project home page:
https://gnupg.org/software/libgcrypt/
The following packages have been upgraded in the Cygwin distribution:
- libgcrypt-devel 1.12.3
- libgcrypt20 1.12.3
For changes since the previous Cygwin release, see the link or list of
changes below, or read /usr/share/doc/libgcrypt/NEWS after installation;
for complete details of changes read /usr/share/doc/libgcrypt/ChangeLog
after installation.
https://dev.gnupg.org/T8223
2026-08-26 1.12.3
Bug fixes:
- Avoid theoretical drive-by loading of netapi32.dll and shell32.dll.
- Validate hash algorithm for use with RSA modulus.
- Validate parameters of Balloon KDF.
- Validate parallelism of Argon2 KDF.
- Fix parsing quoted parts and CRLF/LFCR in s-expression.
- Support BUFLEN check for GCRYMPI_FMT_SSH.
- Fix RSA PSS verify message length checking.
- Avoid a NULL ptr deref due to a unsupported genkey flag for ECC.
- Assert 32 KiB input cap in gcm_ctr_encrypt.
- Fix assertion failure in OCB when a buffered block becomes block 65536.
- Fix OOB read in IMIT MAC verify of GOST28147.
- Fix CMAC block-count truncation for 64 GiB writes.
- Fix AEAD spurious byte-counter carry for 4 GiB adds.
- Validate all KEM input lengths.
- Add length check of DATALEN when parsing s-expression.
- Only accept canonical value for S with EdDSA.
- Only accept canonical signatures for RSA.
- Fix an assertion failure for invalid small-order Ed25519 public keys.
- Validate length of supplied receiver public-key length in DHKEM decapsulation.
- Use a more strict value for the PKCS#1 minimal frame length.
Performance:
- Use just strong random for the Dilithium signature nonce and the Kyber
encapsulation coins.
- Allow internal users to skip fast random poll for ciphers and hashes.
- Speedup sntrup761 by defer reduction in polynomial multiplication,
reading random with a single call, and reducing freeze helpers w/o division.
- Avoid byte-wise load/store on RISC-V with Zicclsm.
- Use unaligned vector memory access on RSIV-V when supported.
- Add Intel SM4 instructions accelerated AVX512 and AVX2 implementation.
- Add Intel SM3 extension implementation.
- Add Intel SHA512 extension implementation.
Other:
- kyber: Accept and return a seed using the gcry_pk_genkey API.
- Add curve "ietf25" as alternative to "Curve25519" with exact RFC-8410
semantics. The name "X25519" was already used as an alias, thus this new name.
- Add straight-line speculation hardening for function ends.
- Fix constant time memequal check for SM2.
- Add post-quantum algorithm benchmarking to bench-slope.
- Due to the minor API updates but with no newer branch released the SO
name has been updated.
--
*** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***
The easiest way to unsubscribe is to visit
<https://cygwin.com/mailman/options/cygwin-announce>, and click 'Unsubscribe'.
If you need more information on unsubscribing, start reading here:
<https://sourceware.org/lists.html#unsubscribe>.
